add production basic http auth