switch to basic auth for all requests