Use HTTP authentication

[tebeka]

In HTTP server. Check if we have user/password or bearer token - populate the session from them.
This comes since we're going to have clients like grafana that have an authentication option in the UI.