How safe is restriction by username and password?