feat(auth): wire up htpasswd auth and error message