removes basic auth from application_controller