basic auth to prevent non logged in users from messing about