add http authentication for admin