add support for http basic auth request header - if header is present, use the password from there to determine permissions, fixes #69

$ curl -F 'file=@somefile;type=text/plain' http://user:password@localhost:5000/+upload   # works! ("user" is ignored)