starting to set up basic auth