- rel 4; drop 'Require all granted' because it makes apache to not ask for auth