Use basic auth with key/secret for all auth operations