Add basic authentication

BASIC_AUTH_USERNAME and BASIC_AUTH_PASSWORD have been set on Heroku
ready for this.