diff --git a/unwind-ui/src/App.vue b/unwind-ui/src/App.vue
index 04ac379..6ee6c5f 100644
--- a/unwind-ui/src/App.vue
+++ b/unwind-ui/src/App.vue
@@ -100,7 +100,8 @@ async function req(url, opts = {}, { user_id = "", secret = "" }, data = null) {
   }
 
   if (secret) {
-    opts.headers["Authorization"] = `Bearer ${user_id} ${secret}`
+    const credentials = btoa(`${user_id}:${secret}`)
+    opts.headers["Authorization"] = `Basic ${credentials}`
     opts.mode = "cors"
     opts.credentials = "include"
   }