update .htaccess, add constants to config
add login form with validation
add authentication for admin pages