password protect in production mode