Simple username/password protect for whole app.

application.rb

    if ENV['AUTH_USERNAME'].present? && ENV['AUTH_PASSWORD'].present?
      config.middleware.insert_after(::Rack::Lock, "::Rack::Auth::Basic", "Staging") do |user, pass|
        [user, pass] == [ENV['AUTH_USERNAME'], ENV['AUTH_PASSWORD']]
      end
    end