Add 1factor auth (login+password) with basic auth policy.