moving towards oath instead of basic auth implementation