The idea is to keep the app as simple as possible - without management of users and authentication/authorization methods. This can be accomplished with an auth proxy standing before the app or a similar method.

HTTP Basic auth is considered secure when running over TLS.