One minor thing: On “Content Security Headers” the Basic Auth Username and Password fields get prefilled with my browsers (Firefox) saved username and passord for the site. On every visit for update I have to clear those, to avoid them being submitted. They could d with the html attributes autocomplete=”off” and autocomplete=”new-password” respectively, imho.