composer update
fix ApplicationLogger

ApplicationLogger is called in shutdown, can examine all resource
request / response. User can bind their own logger in prod, otherwise
it does nothing.
avoid e_notice
add .htaccess for demo.sandbox
add var/log placeholder