add basic auth to api browser

fixes #282