adding password protection check to getShareByToken()