add master password support. usable when basic auth is set
do not rename the files. direct to main if session started