stop using basic auth on production, use SSL

This works, check it out: http://plos-currents.herokuapp.com/
— RW + DT