Add basic auth.

Data is still not provisioned under a given user, but it is at least
not editable by random people now.

: #feature #ui #devise #angular