basic http user authentication kinda working, needs smoothing