I unfortunately don't have the time to dig into this in detail right now, so for now just a few short comments: I posted an example Mojo app with login support here (which I expanded on a bit here), it shows the use of under as suggested by the AM - I also strongly recommend you refactor your authentication code out of the handlers, that'll make for a better design. Also, don't use Basic Authentication, at least use Digest Authentication; there's Mojolicious::Plugin::DigestAuth but I haven't tried this myself yet. More of my Mojo examples are on my scratchpad.