Combine the URL auth key and the password

The auth key `https://vailnote.com/[noteId]#auth=[authKey]` is just the `password `encoded in the URL fragment. For maximum security, it would be a nice feature to have both the _authKey_ and the _password_ (if provided) to have multiple security layers.