Decode Basic Authorization Header Is Correct