removed pw protection for certain subdomains