added password protection for everything except view