ignore .htaccess
auth