responsetype json and password protected directory