svelte fetch authentication