basic authentication working with single access token