removed basic auth and implemented the session token
test fixing