update htaccess for security settings