Deny all requests to rainloop/app/data

Resolves problem of:

There is already an issue for this and the solution is to add a block to our nginx conf.