added user/pass auth