Add .htaccess file to prevent access to configuration file