Default .htaccess allows access to system + application.

![image](https://f.cloud.github.com/assets/719814/521740/833d1db6-bfd1-11e2-9769-995e744ae7e9.png)