implementing http_basic_auth (incomplete)