I think that so time ago we had a feature to protect apps with a password (enabled by a slide button). This was a http password, defined in .htaccess
I don’t find anymore this feature. Do you removed it or maybe I’m wrong…?
I finally found the answer : password protecting is only available on staging site, non on live site.
Though it could be a good idea to have this feature on live site too…