add http authentication for Grants & ExpensesController