add basic authentication step