ensure horizon apache config uses correct user and group