moved http auth for app into main config options, adjusted README some more