some changes in the auth validation process, added basic auth