add basicAuth
http verbs: change get to post