Rest Basic Authorization Header Is Correct