support per-request basic auth (via authorization header)
0.10.13
generate gravatar url automatically