htaccess undo, doc auth

remove an htaccess flag that caused a Forbidden error

documenting authentication script