Move the auth basic to Prepare()