Protect with basic auth for now

Closes #12