add basic auth feature