add basic authorization and firstname/lastname