basic auth with bcrypt added