convert app to modular style, use basic http auth for download management routes