protect .git access by htaccess