add required html authentication