adding .htaccess to app folder

Some people will inevitably deploy app to publicly accessible folder. This file will prevent web access to files in the app folder on Apache.