By default, the ago control web gui does not have security. While this may be fine for local control, you definitely do not want to leave your web gui open to random remote access. A simple username/password system can easily be installed by doing:
/opt/agocontrol/bin/rpc-htpasswd /opt/agocontrol/html/.htpasswd agocontrol your_username_here your_password_here
You can add additional users using the same command while using different username and password values. You can also update a user's password using the same command you used to set it initially.
NOTE: You must match the domain name with the 'domainname' setting in rpc.conf. When nothing is set, it defaults to 'agocontrol'.