Is it allowed to place a form under a password protected area of website?