support basic authentication

...o accessing token endpoint.