added .htaccess to protect vendor folder