login functionality changed: using basicauth