user handler wrapper for basic auth