removed basic authentication from production server