ensure no basic auth with request module