deleted .htpasswd .htaccess
apache basic auth FIXME