basic basic auth for api controller