Basic auth middleware in place