Create .htaccess to prevent the access of the config.yaml file from the web

Using a password and a signin without preventing the access of the config.yaml file is useless...