Added optional basic auth to Heroku manifest