Handling of basic auth, partial update of unit tests

As an interim strategy, the REST API will now have basic auth
credentials passed on each call.  This is not a secure long-term
strategy. We will move to a strategy that avoids storing insecure
credentials on the client.