Add basic-auth filter to security pipeline to support api usage