Create .htaccess to hide config.json

Important! In other case your passwords are visible in the web.