Handle cache-busting and auth consistently.
Test that private-frontend requires basic auth.
Merge pull request #22 from alphagov/private-frontend-auth

Private frontend auth