add basic auth on root