add basic_auth to api
remove basic_auth