add very basic http auth