Bumping version number to 1.5_dev
Add .htaccess to restrict access to vendor/. See https://github.com/bolt/bolt/issues/882