removed visibility for htpasswd