added basic_auth (for realz this time)