Which TWO of the following are used in configuration files to create Apache webserver user authentication?