added baisc auth for http