add basic authentication via Application Server layer