[Feature request] Add basic auth

Disabling SSH really should force the user to acknowledge the risks of doing so... including how only a full reset is the only way to recover should anything Nginx-related mess up. I'll also re-raise the following: