basic auth for root get request only