Secure a bit and add Config

* Add .htaccess files
* Add blank index.html files
* Add util function to sanitize params
* Add default config file (custom config blocked through .gitignore)
* Add robots.txt assuming no robots would view internal dashboard