How to password protect staging environment?

Just added it but now every picture from https://cdn-uploads.example.com and https://cdn-origin.example.com requires to enter the auth password. Is there a way to only protect https://discourse.example.com?

Otherwise I get this now: