Added some basic authentication using hapi-auth-cookie - currently driven by a static array of users - will be a MongoDB document.