update readme with server setup of roots-cms
move basic auth into config file