* added documentation for basic_auth_file and made this overrule basic_auth_users