web services security

I've create my first web service using the asp.net ajax autocomplete.

I notice that if I access the url of the web service (the .asmx file), I can access it, so anybody can access it.

How can I avoid this, so that it can only be accesed by my app?

Thank you
...