update app-login location & add .htaccess