made some changes in basic auth. (username is passed back)