use the basic authentication header to log in