starting api auth with basic