adds htaccess and webconfigs to stop direct access to certen files