add README. Start basic auth