updated to refer to .htpasswd