all.js tweaks
basic authentication to hide index page from search engine eyes