setup http basic auth

when BASIC_AUTH_USER and BASIC_AUTH_PASSWORD env variables are set this
will active http basic auth on the whole site
update README for basic auth