add basic (insecure) authentication via HTTPAuth