bottle.auth_basic() works but cant be tested