use _u (and _p) for basic authentication