preliminary http basic auth support