adding password protection check to getShareByToken()

@karlitschek @schiesbn @PVince81 @bantu @butonic THX