basic autentication round-trip