restrict access to public files only

use mod_rewrite to pretend theese files are not existend for security purposes