adding auth stuff to htaccess
readme update