add basic authenciation filter