add basic auth

Simple lockdown.

cc @lonelyplanet/directory