Explain how to setup password protection

[gavinwye]

The readme file discusses security and password protecting a prototype. This is built into the GOV.UK kit and also in the HMRC kit (as it's a fork).

The documentation should be expanded to make it easier to understand and tell people what they need to do to make this happen.

[feedmypixel]

@gavinwye do you mean how to setup USERNAME and PASSWORD on heroku? This is available in 5-set-a-username-and-password

[rpowis]

@feedmypixel that's not obvious though and should probably be linked to from the README's security section.

@gavinwye would that do it?

[gavinwye]

Yes, I think it needs further documentation in the gov.uk kit as well. We need to approach this from the point of view of a complete novice with Heroku. The Heroku docs are not easy to understand.

Something @jennyhodgson can help with maybe.

I'm assuming we'd contribute this back to the GOV.UK kit as well.

[jennyhodgson]

Aye, it looks to me like a case of expanding the existing explanation and placing it better, earlier on. Happy to look at this.

[feedmypixel]

@jennyhodgson it sounds like this could be a PR raised on https://github.com/alphagov/govuk_prototype_kit and then we can update to pull it in.