Fixed two generally annoying installer quirks.
disallow access to composer files
Merge pull request #2308 from huglester/2.3/develop

disallow access to composer files
Cleaned up validation
Merge remote-tracking branch 'upstream/2.3/develop' into 2.3/develop