modified htaccess for higher security