add basic auth for agreements#destroy