allowing for basic auth on endpoints, if so desired