add password protection to entire site. password itself in secret_settings