UPDATE not to include .htpasswd