add http-auth