add basic auth to production.rb