access control with .htaccess files added