add basic auth endpoint