Switch to nginx-based HTTP authentication for signups

[nolanlawson]

This is more secure since it blocks API access as well. It's also simpler and probably less error-prone (see #27): https://masto.pt/users/hugo/updates/1155