basic auth and protecting of api routes