added htaccess password