How do I implement a minimal access control for a private Web App?

I'm developing a web application with Python/Bottle having only one user (me), running on my own (https) server. I would like to prevent someone from stumbling over my application and abusing it, but at the same time I want to conveniently use it from my iPhone. Entering a password each time is not an option for me.

I was thinking along the lines of either having a complex url or adding some token to the url and to bookmark this page.

Would this provide the minimal security I'm looking for? Are there better options?