Create .htaccess

deny direct access to txt files in /admin