get basic username / password auth and spot enumerations working