requests now passworded

We don't get direct control over the files, it's all done by some kind of database, and the admin interface does not include a no robots option. Grrr