corrected .htaccess and .htpasswd