Security update with .htaccess