add htpasswd file for var/export