Add password authenticator that calls out to external basic auth-protected endpoint