support http authentiation and add require login when access the products list