removed response body from initial response (for now); added base64 encode to Basic auth