improved security with moving the document root to ./public