added htaccess file to protect scripts and private information