move htpasswd to vhosts define