enable basic auth protection as default, except for localhost requests
Merge branch 'master' of https://github.com/kaizhu256/utility2
add more documentation, use suffix test instead of prefix