basic auth changes
use rest api