Add htaccess file

- deny access to db/