got a basic auth system in place

not what i was hoping for, though. i want to decouple it
into a completely separate module