Just (2/18/2015) downloaded the latest... and appreciate the basic auth inputs in the dashboard; however the password input could have a "password" type to not show actual characters.
Also noticed a bug where the dashboard "Request Body" is blank for endpoints with multiple update verbs (put, post, patch). Did a little investigating and found a fix in line 343 of recource.cfm
taffy.resources['#local.resourceHTTPID#'] = taffy.resources['#local.currentResource.beanName#'] || {};
should be (I think as it does fix the issue, but didn't do further testing)
taffy.resources['#local.resourceHTTPID#'] = taffy.resources['#local.resourceHTTPID#'] || {};