added basic userpass auth