A simple Koajs Basic Auth with CORS