Restricted direct access to main.php

..by placing the auth code inside the password.php file and including it in main.php