encoded password does not look like bcrypt basic auth