check that it is actually a basic auth authorization header befor trying basic auth