basic auth, happy path working