add basic auth, wip