auth with username and password when access /module/helloPomelo