add auth to nginx config