Add http basic auth based on env vars

[gianarb]

No description provided.

[gianarb]

@mbovo this is good. I am thinking about how to make it optional. I mean if we don't inject the env vars we are still requiring an empty auth

[mbovo]

@gianarb I've added a flag to enable (default disabled) authentication, with default user/pass (orbiter/orbiter) just in case. I'm using kelseyhightower/envconfig here to read custom configuration from env, seems a good lib. As improvement in
mbovo@59758b2 i've added a map for multiple user/pass.

I think configuration like this should be placed in global conf and propagated, instead of using repeated code. I will open another proposal/pr for this last point.

[gianarb]

I like the mapping idea. I dont think we need library to read some envvar. I think the os package is enough