working version of the web gui. now minimal (!) security with http auth. ssl NOT working now.