Exclude htaccess and password