#15 added htaccess file to prevent execution of php files from the files folder