add HTTP BASIC authentication