fixed composer.json
Fixed: .htaccess dont allow fetching assets
Added: composer symlink support
Added: BE_AUTH check for ajax responses (fixes #1)