Fix restricted file access in htaccess

The original regex would have matched stuff like "op.init.php". Moving the $ fixes this.
Merge pull request #136 from mgerhardt/b-dev-ce

Fix restricted file access in htaccess