probably a number of ways to accomplish this...but basically I think you need to make sure that ONLY your IP can get to the Pi. Can be done via iptables, hosts.allow, hosts.deny, or nginx config
See this:
http://nginx.com/resources/admin-guide/restricting-access/