Protect your dashboard without editing the .htaccess file -- the FIRST one that completely blocks remote bot login requests.