Allow --http_credentials_file

[SEJeff]

Ideally this would support a standard apache htpasswd style file, which would also add the benefit of allowing multiple different user/password combinations to access the webapp such as marathon.