added config middleware
basic auth