basic http authentication for json requests