Changed query-based auth to HTTP Basic header

Also added a dummy role group db for the sake of tests.