enable http auth for nginx, misc cleanup