adding htaccess rule to prevent user access folder in public