add http auth control