basic auth with dummy creds