Add Basic Auth support

This adds basic auth support. Requests to the metrics endpoint will require basic auth if -auth.pass is set.
@grobie You're right, that's more explicit. Fixing it.