Fix htaccess path and restrict update to CLI only