added basic authentication.  Auth token is being sent back to front end.