Invalidate the Static Cache
To enforce protection, invalidate the static content cache. Otherwise unprotected content that was already delivered is valid until it expires. If you change the password, invalidate the static content cache to enforce the use of the new password. Otherwise the once delivered content is served until it expires.