adding in basic http auth