Test http auth

[wvengen]

After PR #21, also test that http authentication works as supposed when configured in the config file (see PR #20).

This requires a bit of thinking, because the current integration tests assume no config file changes, but here we would like both to keep testing that the API is accessible without http auth in the default config, and test that it is not accessible when configured.