Password-protect MQTT broker
Currently, our MQTT broker is accessible via unencrypted HTTP and without any authentication.
While SSL is possible with the ESP8266, it appears to use up a lot of memory.
We should at least add a simple username/password protection to prevent obvious "attacks".