add user auth to public/.htaccess