hide cs api posts
basic http auth with forms