added deny for .htaccess to nginx configuration