Issue 833 password protected projects

I had thought of placing it in the auth module. In the end this is an element/class whose responsibility is to authorise. However, the schema in auth module is quite defined, check if current user can access in a CRUD way to a resource, and if not rise either 401 or 403.
On the other hand, this will never rise any of those, but request a password... it's more like some login for projects/apps, that's what did not convince me to place it there...

Anyway, I believe placing it on it's own module may be the better idea, :+1: