add HTTP Basic Authentication