added an htaccess file to restrict access to internal processes