add auth basic to nginx configuration

replaces #230
Not familiar with this - what exactly is this timeout for? connect? first-byte?