more details about using basic auth