#11 naive basic auth first draft