http basic for api auth