remove option to turn off headerBasicAuth