fixes #6: Switch to basic auth