Add basic auth

Require a username and password (stored in plain-
text in environment variables). This is not
industrial-grade security!

The SHA1-ing is to make it play nice with the 
go-http-auth library, which expects an encrypted
string.
Update the Procfile to use the new package name