Securing a web application with basic authentication