updated .htaccess files to prevent directory listing