start of basic authentication