Move .htaccess file containing "deny from all" to the root directory.

When Apache AllowOverride is enabled, this encourages DocumentRoot to be
correctly set to the "web" directory.