add Basic Auth challenge