update .htaccess

forbid files