Get rid of basic authentication

[ferjm]

Instead of using basic authentication for the admin user, it would be safer to use the OAuth based flow being implemented in #24 and have a list of allowed admin users.