add basic auth support
- expose basic auth support via `--secure`
- make the project a bit more heroku friendly by providing `process.env` variables for environment specific options