Tighten up indentations.
Nest PHP and static file configuration under basic auth locations.
Fix erroneous exact match.