enable basic auth for SecretaryApi
remove userId usage inside client (auth is used on api side)