added some .htaccess-files to restrict access to uploads and classes