Use HttpBasicAuthentication for rest-loan