Provide authentication

[alecalve]

Basic auth like bitcoind would be a good start, but several options could be supported.

[alecalve]

Now that requests are CORS enabled by default (#4), we need to make it optional once auth is enabled.