At ECH's request, GN added password-protection through changes in WEB-INF/web.xml and to Tomcat-dev's tomcat-users.xml. I've now updated my copy of the first file, and added it to SVN. Found a conflict in SVN with two files and one directory, but there didn't appear to be any actual differences, so I resolved by reverting before making my commit.