tls.go: add http.Handler and HandlerFunc basic auth wrapping functions