add .htaccess file to installer script

(this prevents direct hrml access to the plugin and all data files)