using thin as web server. added basic auth