http auth
allow /add without http auth until send-temps.sh is updated
all views are protected by http auth
get view is public