add basic-auth