prevent access to UPGRADING via .htaccess