added .htaccess for security
tune note