Order allow,deny Deny from all Order allow,deny Deny from all # See https://wicg.github.io/change-password-url/ Redirect /.well-known/change-password /go/index/chpass header always set X-Content-Type-Options nosniff RewriteEngine On RewriteBase / RewriteRule ^go/(.*)$ dispatch.php?go=$1&%{QUERY_STRING} RewriteRule ^init(.*)$ go/index/initialize_useraccount?token=$1&%{QUERY_STRING} [R] RewriteRule ^verify(.*)$ go/contacts/verify?token=$1&%{QUERY_STRING} [R]