Added .htaccess to protect config-files