Added .htaccess forbidding access to the server directory