update auth path
add basic auth