add basic auth on production