htpasswd=False is better handled now