add http authentication for heroku