first pass at basic authentication in place with custom realm