authentication
basic authentication without password hash + viewbag