add basic auth to spawner

[lihebi]

Prevent unauthorized users from accessing spawner APIs. This PR only check for if user is logged in.

TODO:

• [ ] only authorize if user is the owner or collaborator of the repo