users cannot manage the system

Updated htaccess so users can request their config files but cannot access the rest of the app