added user events stream and POST with basic auth, we'll migrate to auth-token soon