another test app - basic auth via a servlet filter