Separate basic auth loop from the main accept.