Move .htpasswd file out of the SSL directory.