add simple http authentication