add some basic auth to site