first working cut of Basic Auth
needs more work:
- caching the auth processing on the routes
- implement the Session Based auth