use basic auth instead of http signature
update README
removed unneeded rsa key
version bump and move mocha to devDependencies