Remove invalid code and comment

Now we're using passport for http basic auth we don't need this function
and the comment below is also no longer relevant.