use basicAuth to get username