api: add decorator for requiring basic authentication
api: require basic authentication in all urls