add password protection for settings (should only be needed for remote access)