Fixes Apache misconfiguration

The SQLite-database ```palma.db``` should never be sent to any client (see [TODO](https://github.com/UB-Mannheim/PalMA/blob/master/TODO)) and no client should access files in the ```uploads/```-directory. This commit fixes a **arbitrary code execution vulnerability**.