updated to working state with real http
basic auth in http header