API: use basic authentication.

This is sufficient for the moment