add http basic protection during beta, but not to API
using secret settings for protect_beta
Merge pull request #31 from jpslav/protect-beta

Protect beta