> files call .htaccess and .htpasswd and I have been told that these are suppost to be picked up by the server Those are used by Apache webserver. Xitami does not use that form of access control. Xitami has a password protection feature. It is demonstrated on the default home page when you install Xitami. -PRR