deploy htaccess, denying everything