Isn't htacces a file with the encrypted password in it?