basic authentication is now a requirement
update documentation