require basic authentication