Ahh yeah. The idea behind that was that you could just enter the URL with the password and skip a screen.

If you'd like to implement a better password authentication system, I'd be happy to accept your pull request.