HTTP auth username & password no longer hardcoded

Moved HTTP starting log just beofore the listen() call
Added Cairo warning

Added David badge