add basic authorization support