added deny .md to permissions
moved to root references for css