added basic auth for the login controller (only)