Changed valid hosts to additionally provide basic auth config.  Required some refactoring in check-auth and the http handler