fix htaccess for security tutorial