add preemptive basic auth