add basic auth support
- expose basic auth support via `--secure`
- make it a bit more heroku friendly by providing `process.env` variables for most environment specific options