I do this via HTTP Basic auth + ssl. On Heroku you get SSL for free (https://myapp.herokuapp.com https://myapp.herokuapp.com), so that + basicauth works pretty

I do this via HTTP Basic auth + ssl. On Heroku you get SSL for free (https://myapp.herokuapp.com https://myapp.herokuapp.com), so that + basicauth works pretty well. EDIT: Wanted to add that I love doing it on Heroku as you get the automatic load balancing so you can easily add web dynos.