Move storage under App_Data

Move the data storage under App_Data to protect from client reading .xml
files. Added ContentHandler (Add relevant rewrite rule) to continue
serving /posts/files/* content