fix #140. add basic authentication.