Have roles reference the nginx role for basic auth