Fixes magento-hackathon root dir
Makes vendor installed in var/ so are protected from web access