feat: add authentication

add cookie-based authentication. Requests with 401 status code will
be intercepted on the frontend and a login form is shown.