adding basic auth to /models