add basic http authentication