add some very basic authentication to protect modification of resources