You can inject basic auth headers using VCL in a Varnish Proxy. You cannot in a mod security app on section.io.