document NewServer
implement basic auth