add .htaccess to deny access to .git