Add .htaccess to files directory to prevent multiple vulnerabilities