add htacces file
also deny the user database