work towards basic auth support