loosen basic auth rules
allow all private networks
Merge pull request #1272 from edx/jarv/loosen-basic-auth-rules

loosen basic auth rules