added basic http auth