add auth basic to nginx configuration

replaces #230
gotcha. I forgot about that from the other PR :)