moved .htacess into webroot