writing bottle auth example