Just put apache or nginx in front of it and let that handle auth.