When migrating to Flywheel, it was not clear that when the plugin says "Basic Authentication detected" I needed the username/password from Privacy Mode settings (or disable Privacy Mode).