fixed basic auth workflow to not panic when it is not a basic auth scheme