use http basic auth for api acces now, old method for temp backwards compatibility