.htaccess blocking needs to be updated to apache 2.4 rule format

[codeling]

As noted in this other issue, bfstop currently still uses Deny from ... blocking rules, which are deprecated, and should be replaced with the according Require not ... rules