ignore secret-combination.txt, create one with random contents, and fix a typo (?) on the password file

Trying to use htaccess to block access
Merge branch 'master' of git://github.com/e28eta/stripe-ctf-2.0