added basic authentication to requests

ok to merge to master