it still uses htpasswd as authn backend; should move to postgresql sooner or later test auth, user=admin pass=password
