I am not too worried about having password protection
iff only files within the shared folder can be transferred. I think is far more important than having a password feature atm. Like when I have Apache running, I want the highest level people can view to be the htdocs folder, not my entire hard disk
I am not the programmer but obviously it would go something like this:
if file is in shared folder
begin transfer
else deny transfer
If you implement this, then I can really start using this plugin without worry
Nice work up till now tho!