Introduce authentication and basic authorization in the server.

- When enabled, all requests must be authorized using an authorization token
- Token is acquired by authenticating with a username/password tuple.
Intentionally - it's the name of the header in this case and thus matches the standard, not used as a simple noun in a sentence as previously.