added login route

Added a route which demonstrates how to prompt the client to provide an
Authorization header using Basic authentication.  Browsers should handle
this by displaying a login form.