Secure API

The Purpose Platform is set up with HTTP basic authentication for its API endpoints.

The movement's password needs to be set via the app's console:
movement.password = 'password'
movement.save

Then set the MOVEMENT_BASIC_AUTH_PASSWORD env variable on the movement site to the movement's password. Set AUTHENTICATE_API_CALLS env variable on the Platform app to toggle HTTP basic authentication on and off.