added .htaccess security info