Added .htaccess file to deny access to config.ini (as secure as it
gets without ssl)