added basic authentication to the users controller