add http authentication