Well it does work! Not all url's are rewritten of course, but those that do work.
I left the .htacces as is, in my testdomain root it looks like this:
Content visible to verified customers only.
I'll keep on trying. It's a bit confusing to say the least.
I tried to make it look like
if I browse to a users image.
But whenever I try slashes strange things happen.