Fixes magento-hackathon root dir
Makes vendor installed in var/ so are protected from web access
Merge branch 'init' into 1.7.0.2