add basic auth un/pw