test test test
test on basicauth
test on basicauth 2
test on basic everywhere
fix on CORS