Add password protection to showTokens()