adding .htpasswd to ignore