support for "password" option (using basic auth)

also added a new config key: “md.authUsername”