password protection on autocomplete urls