http basic auth
layout fixed