added a http authentication mechanism (inactive per default) + model "setting" + settings_controller