First pass at server side basic auth