fix cursor. add password protection on html output for staging