update htaccess: force sso login