added .htaccess basic auth