added basic http auth to POST method to prevent abuse until proper authorization system is implemented