auth_pam/auth_basic in the nginx config and the http/https does authentication.

And far less space to mess things up than with coding a fancy login page.