adding user config
removed oh securoty, replaced with nginx basic auth