added basic auth for endpoints to secure