Security Fix

If the server is public, anyone can curl <kibana_ip:80>. Added auth_basic to ES calls.