add http auth to the whole site