Updated .htaccess

Rewriterule to preventing direct access to resource files in /app/ and /core/ [via rel1sh]