basic auth now functioning with passwords & password reset