use HttpAuthenticationFeature.basic
trivial