stop using basic auth on production, use ssl
add AWS IAM account note
Merge pull request #505 from Tahi-project/remove-production-basic-auth

stop using basic auth on production, use SSL