add docs about basic auth to readme