add basic auth handler