almost there
add basic auth to /data, default is 'example'
make auth actually optional