basic authentication flow now complete