BUGFIX #34 Only block root vendor folder

Use RewriteRule instead to take in account any subfolder via RewriteBase. Deny ss-cache and composer via RewriteRule too.

Move to RewriteRules
Merge pull request #35 from colymba/3.0-htaccess-fix

BUGFIX #34 block vendor access only if outside themes