added HTTP basic auth and external config file