Add an htaccess password and only allow https