handle password protected links. Closes #97