login method now uses HTTP_basic