api/auth: split from api/util, initial commit of HTTP Basic authentication