ui: introducing HTTP access control (Basic auth + in config users)