basic authentication through email is in place