You could do this ..
you can copy run.php to say runsecure.php
then in there you can set
$_REQUEST["project_password"] = "mypass";
And then you can use runsecure.php in your url.
You could also have a project.php script which also sets the project so you dont have to provide that either..
does that help?