● WARNING! Authentication is only safe when used over https and with a strong password.

● Expire after - when user session expires. Can be set with suffixes m(minute), h(hour), d(day) or M(month). Default: 7d.

● Login. For Auth to work, login and password must not be empty.

● Password is stored encrypted in config file. If you forgot your password, just set auth_password: field to empty there.