Added basic auth (because I'm deploying to Heroku - don't want everybody to have access).