I already explained everything you need to do for Basic auth. You add the username and password to the remote DB URL. That’s it. Period. No need to use _session (I don’t believe we even implement _session in CBL’s REST API; it’s only in Sync Gateway.)