Remove support for Basic Auth

In the past, we used this to provide API authentication.

Now though, we are using OAuth Bearer token authentication which is far more flexible and powerful: you can have per-app API users who can be granted permissions on a needs-basis rather than every API client having blanket access.

This will constitute a breaking change and hence a major version.