move basic auth info to config