session params via htaccess