add username based authorization
Merge remote-tracking branch 'upstream/master'

Conflicts:
	scheduler/http_srv.go