add .htaccess file to disable directory listing