add simple authentication for api server