Require user and password to all requests