Fix restricted file access in htaccess

The original regex would have matched stuff like "op.init.php". Moving the $ fixes this.