Changing Node-RED configuration does not affect anything


I am running an application on Node-RED, my application has an UI panel on address:1880/ui, this url should be public but the main url address:1880/ should not be public and has to be password protected. To do this I edit the ~/.node-red/settings.js file and add these lines below, but the main url is not password protected even if I have restart raspberry pi. What can I do to solve this?

    adminAuth: {
        type: "credentials",
        users: [{
            username: "admin",
            password: "mypassword",
            permissions: "*"

Thank you…