added user-auth filter with HTTP1.1 Basic Authentication Header,
tested working