added htaccess file to denay all access to configuration directory