fix bug 853660 - Don't allow index.php access

https://bugzilla.mozilla.org/show_bug.cgi?id=853660

That address is being hit because it's a dir default file.  This doesn't prevent direct access to all theme files though;  that would probably be done with .htaccess, which an Ops member maybe better at.