Updated submodules
Updated htaccess

Removed section forbidding access to application and system directories.
These are not needed as they are not in the document root.
Changed default controller