Hello aaPanel_Kern
I checked thoroughly this problem. The security entrance is already set.
After checking again I found out if an IP has accessed the panel previously and it wants to access the panel, you can do so just by entering IP and no security entrance required.
When IP changed or cache cleared in browser then security entrance is required.
But isn't this should be the case everytime, that if we don't put the security entrance we should not be allowed to access the panel. Some kind of cache allowing browser to bypass the entrance if previously logged in to panel.