[kovidgoyal]

Just create user accounts, then only people with the suername and apssword can access your server. If you want to protect against man-in-the-middle attacks then setup http as well.