Update Basic Auth process for Express

Express 4.x no longer supports Basic Auth, so use the node-basicauth
package instead. We use Basic Auth to password-protect our sites
on Heroku if required.
Update README with Basic Auth instructions for Heroku
Merge pull request #620 from alphagov/bugfix/allow-heroku-basic-auth

Fix Basic Auth for new version of Express