allow authentication through htpasswd file