added deny fr from all for config directry