add basic http auth for index, destory, update methods