add htp basic auth