Also updated .htaccess for sites/default/private.