Frontend not asking for api_password

Installation
1

I have been going backwards and forwards between hassio and hassbian, now i’ve got Appdaemon working with Hassbian at last id like to stick with that, id like to use the iOS app again but can’t expose the instance to the outside world until I get the password working, even though ive set it in the configuration.yaml, it never ask for it?

homeassistant:
  # Name of the location where Home Assistant is running
  name: Home
  # Location required to calculate the time the sun rises and sets
  latitude: 51.11009
  longitude: -0.85405
  # Impacts weather/sunrise data (altitude above sea level in meters)
  elevation: 117
  # metric for Metric, imperial for Imperial
  unit_system: metric
  # Pick yours from here: http://en.wikipedia.org/wiki/List_of_tz_database_time_zones
  time_zone: Europe/London
  # Customization file
  customize: !include customize.yaml
  whitelist_external_dirs: /tmp/

# Show links to resources in log and frontend
# introduction:

# Enables the frontend
frontend:

# Enables configuration UI
config:

http:
  api_password: !secret http_password

# Checks for available updates
# Note: This component will send some information about your system to
# the developers to assist with development of Home Assistant.
# For more information, please see:
# https://home-assistant.io/blog/2016/10/25/explaining-the-updater/
updater:
  # Optional, allows Home Assistant developers to focus on popular components.
  # include_used_components: true

# Discover some devices automatically
discovery:

# Allows you to issue voice commands from the frontend in enabled browsers
conversation:

# Enables support for tracking state changes over time
history:

# View all events in a logbook
logbook:

# Enables a map showing the location of tracked devices
map:

notify:
  - name: Parents
    platform: group
    services:
      - service: ios_karrens_iphone
      - service: ios_scotts_iphone

# Track the sun
sun:

device_tracker:
  - platform: ubus
    host: 192.168.1.1
    username: root
    password: !secret device_tracker_ubus
  - platform: bluetooth_tracker

# Text to speech
tts:
  - platform: google

# Cloud
cloud:

mqtt:
  broker: 192.168.1.81
  username: Scott
  password: !secret mqtt_password

input_number:
  landing_run_time:
    name: Landing Run Time
    initial: 3
    min: 1
    max: 10
    step: 1
  hall_run_time:
    name: Hall Run Time
    initial: 3
    min: 1
    max: 10
    step: 1

camera:
  - platform: ffmpeg
    input: -rtsp_transport tcp -i rtsp://192.168.1.197:554/user=admin&password=channel=1&stream=0.sdp
    name: Back Garden
    ffmpeg_bin: /usr/bin/ffmpeg
  - platform: ffmpeg
    input: -rtsp_transport tcp -i rtsp://192.168.1.197:554/user=admin&password=channel=2&stream=0.sdp
    name: Front Garden
    ffmpeg_bin: /usr/bin/ffmpeg

konnected:
  access_token: 123456789
  devices:
    - id: 18fe3499dcb2
      binary_sensors:
        - pin: 1
          type: door
          name: 'Front Door'
        - pin: 2
          type: door
          name: 'Back Door'

group: !include groups.yaml
automation: !include automations.yaml
script: !include scripts.yaml
light: !include light.yaml
binary_sensor: !include binary.yaml
sensor: !include sensor.yaml
2

Did you restart HA after the change?

3

yes restarted many times

4

the iOS app asks for the password when using the duckdns address, so I think thats ok in terms of security?