basic auth spec and readme stuff