figured out basic auth and wrote a keychain manager