adding http basic security