basic authentication and password encryption