protect .git directory from being served