At that moment there is no authentication in your milestone 2 project --- nothing is checking the password.

We have added a reference section that explains how to add basic access authentication tokens to the HTTP headers:

<>

Note that this is a bonus task --- you can still get full marks without implementing it.