finished with auth-php and mod htaccess