Protect beta

Gives us simple http basic authentication while the site is not yet ready for public eyes (mostly just keeps out Google and random wandering folks).  In vagrant environment, the username and password are both "beta" (configurable in the Vagrantfile JSON).  This authentication is skipped for api calls.