password protection script alone on index.html