use basic authentication for the client authentication