create API annotation to send the basic auth headers only for API routes