removed basic auth and implemented the session token