moved data folder up, so not accessible from web doc root