added secure directory using .htaccess