add basic auth for producitons
Merge remote-tracking branch 'origin/hara' into hara