blanket basic auth middleware