Exposing admin-api outside of localhost

[OlofBlomqvist]

For simplifying development of tools to programatically control the proxy we should allow binding to non-loopback device and only listen to https. Need to be able to configure listening on specific hostname and cors customization thru config file. Also support letsencrypt once pr for that is merged. All requests (both local and external) must require auth.

• Support configure password in config file
• Enforce TLS for API and WebUI
• Require password hash to be included as auth bearer in in requests to the api
• Web-UI login screen