added validation with HTTP Basic auth
Added token to restricted path