allow basic authorization for nginx status url (similar to apache)