Added htaccess to deny access to vendor directory