use basic_auth with single 'token:' string