replace css with less
support basic authentication