add simple http authentication
merge