Lock down access

[stephenmparke]

• [x] Password protect or some mechanism
• [x] create robots.txt

[stephenmparke]

Note: the CORS work is in another issue, I'm just creating this as kindof a last step before posting online somewhere.

[stephenmparke]

Just a thought: perhaps the easiest way to make sure only we can use it for now is a rudimentary token passed through the URL. Whatchoo think, @danbush ?

[stephenmparke]

Rudimentary for now, but complete.