add .htacess to protect architecture files from direct access