try encoding the request with basic auth