removed omniauth and added http basic auth