Added .htaccess files to prevent viewing files...

Added "Deny From All" to .htaccess files to prevent viewing of the
production level json files just in case someone were to forget to move
this package outside of the reach of http access.