added a simple basic-auth middleware