add basic authorization for parent HTTP