add a basic filter for http auth