One interesting protip: if you're running OpenHands on a remote server, you can use ngrok oauth to make it so you need to log in to your Google account to access the server, very easy!: Secure your applications with OAuth 2.0 - ngrok documentation

wow this is cool, we could consider build this into canvas as an optional onboarding flow 🤩

Or at least an example in the docs on how to secure your server