Change functionality of WebSSh server -- 2

There are 2 issues with a webssh server created with node.js i had created to be used to execute cmds on it's local cli just like an ssh connection. (1) the authentication routine. To connect to this server it requires 2 fields from my db "Merchant Id" and "password". I would like to only require "Merchant ID" to login to it. (2) It was supposed to be setup to restrict all cmds to having the "lightning-cli" prefix required to execute a cmd, which it currently does not. It currently restricts a certain group of cmds to needing a "boost 2fa pw" from the company db to execute which is fine.

The server code is on git. The server is deployed to a test server. So the git will need updating after the fixes and the deployed server will need to be updated as well.