added password prompt to protect testing site