add how to set up server-side password in readme.txt. also add a
sample htaccess file under conf.