added basic auth with session