Removes avatar and user templates

These get little use
Adds optional HTTP basic auth