Send API secret as basic auth password instead of username