adding basic user auth