added htacces file for protection