wrapped action with basic auth