revising htaccess for security purposes