Added .htaccess file with "deny from all" in the Layouts folder