add http basic auth