added .htaccess restrictions