added .htaccess to assets and public folders to disallow access