add basicAuth for dev only