Add basic authentication to the toggler endpoint

To increase security I added a basic authentication for the toggler endpoint.
since `activesupport` is required, why not `@env.blank?`