add basic authentication for non-idempotent api commands until oauth is up and running