update htaccess for deny