[security] Move basic authentication into the own package