The server should have a basic authentication and authorization plan for controlling how data is synced