using basicAuth for now...working on API functionality