htaccess added to restrict folder access