Options -Indexes

<Files "stats.csv">
  Require all denied
</Files>

RedirectMatch 404 ^/api/sessions/