pass-through authentication and base64