updating htaccess for security