added authentication with htaccess