So why I didn't get 401 authentication error if I put some wrong username/password or empty ?
For Authentication need to set your account with basic auth or you can use your environment variable json file to set your details on global for change the header authentication.