Basic auth needs to be done with client id/secret not user name/password