basic auth added via express.basicAuth.  Basic auth should return a token to the client which can then be passed back via the Authentication: Bearer <token> header to verify the authenticity of the client request. /api/* routes are all protected. Added 3 new flags in the localhost-conf.json file for enabling and disabling basic auth, api protection. Enabling these two allows you to achieve a RESTFUL api since no user state is ever saved during login.