add basic auth for the index page