use basic auth for post page