users must now log in to modify bookmarks if their page is password-protected