removed htpasswd from htaccess