#4 implement HTTP basic auth