Minor update (0.6.4)

Update htaccess rules to deny access to physical files (excluding etc/*, sys/img/*, sys/css/*).
Updated admin mode to also check for http access (using ${QUERY_STRING}) and throw a 404 if found.

Fixes #12