For security reasons, requests using HTTP Basic Authentication cannot include cookies POST,CURL

Me too, I ran a similar test with postman and have the same result.