Use User model for checking basic auth password instead of dummy checking.

You can create a local user by pointing your browser to http://localhost:1337/user/create?username=yourusername&password=securepassword at this point. The API is still open.