add basic http auth