added basic auth to api