add basic auth for production env