Update .htaccess

Update to deny access to php/html files