added (optional) authorization for protected feeds

corporate environments have protected NuGet feeds that should be
accessible