sloppy permissions and an htaccess for apache usage