curl with ba auth