Using htaccess to prevent direct access to media files