add basic user auth