password protect all resources