Restrict API access with Basic authentication