instead of trying to restrict access to the site files, you should restrict access by IP address.
allow your client IP address to access the site, but show an under construction message to others.
http://www.inmotionhosting.com/support/website/how-to/redirect-visitors-under-construction-page