changed from apache/ldap to dumb nginx/basic auth :)