Protect website administration with a password:
-manage HTTP sessions
-add a REST service to manage authentication
-restrict REST API access to authenticated users
-add password in configuration
-create authentication form