security fix: SA-CORE-2013-003, files/ protection

sites need to be reverified to take effect.

we also take care of regenerating the .htaccess even though it's not
actually necessary. this is because core status will warn us if the file
is out of date