basic auth for web server, and removed public/index