move basic_auth to get method