add basic auth using password as token (closes #14)