added .htaccess to prevent access to .git files and config files