add .htaccess with deny from all and remove index.html from application dir