Added .htaccess to stop download of config.json

Trying to download the config.json file should now throw a 403