basic authentication and routes