Updated .htaccess + Hybrid Auth