basic HTTP authorization for 'admin' user