try with basic auth in the header