htaccess password moved to textarea