basic auth
route the root
prepare for heroku