added basic auth, need to make login and pass a config option