add basic auth middleware