Add basic auth for group URLs. Fix small arg type issue with track calls.