Add .htaccess files to protect directories