add http auth for production