This lab is reachable from the internet, so it needs a password.
Task links from your daily email work without signing in — they carry their own signed token.