got basic auth stuff going