adds HTTP authentication