fixed basic REST authentication (verify function)