added htaccess with deny instruction to template directory