add site and db password protection