add auth.py so we can support basic authentication w/ a simple decorator