add basic auth

username and password for upload and download