use Basic Auth in loadtest

to go along with the recent change