Ditched .htaccess in favor of a proper apache config file
Some fixes in index.php:

- use REQUEST_URI as a fallback when PATH_INFO isn't available
- check controller names against whitelist