#4 implement basic HTTP auth