added basic auth for user object