preemptive basic authentication