move basic auth into config file