access_token not working

[evilalmus]

Describe the bug
Deployed using the Heroku app and set an access_token and an http username/password. When trying to access the dashboard widgets using the access_token browser prompts for a username/password. (I also tried w/o a user/pass set, in which case it allows access even without the token)

To Reproduce
Steps to reproduce the behavior:

1. Deploy using heroku app
2. Include http auth values and access token
3. test access with/without access_token

Expected behavior
w/o access_token access should not be granted
with access_token access should be granted and user/pass should not be requested

Actual behavior
with or w/o access_token browser prompts for user/pass, once they are entered access is granted, if they are not entered access is not granted. (seems that setting the access token doesn't do anything)