You can't reliably protect a html5 product from being copied, that's one of the few real issues with it.
You can try to restrict its use with logins, but that too can be bypassed since the code is right there for the taking, just like our html5 games, or any exe for that matter.
Of course the most likely abuse will come in the form of scam, or phishing users passwords.