NPM and JSVM, custom basic-auth plugin more details?

This doesn’t affect security

This directly affects user access.