password protect tools and server-status