Make posting CREST links require a password as default