Site authentication

[dfoderick]

Web site and api need authentication.
Even a simple configurable username/password would suffice to begin with.

[dfoderick]

Until authentication is added users should only run the sites behind a firewall and do not open ports to the outside world.