Authenticate a client via HTTP auth header

Fixes #18