WIP: Add gds-sso basic auth checks

This needs to be moved out of api.py