* customize default site to explicitly allow remote access only to appropriate subdirectories of /var/www/
* exclude known errors from apache error log
* only allow access to /test-ui from RFC 1918 (private IPv4) space for vagrant-virtualbox test use
Merge pull request #642 from cgolubi1/626_apache_file_access

modify apache site configuration to prevent direct access to non-API PHP files