removed .htpasswd be default