add basic http auth for production