add http basic auth based on jeffs lil lecture