add http basic auth support to the API server