Password protection

Not quite sure about this one yet. One of the admin controls (#5) could be a global password. However, the current project is meant to be hosted yourself, so we could also delegate this responsibility to the deployer (.htpasswd or something).