using curl for basic auth