add basic auth to root page