htaccess cleanup
fixes #774 tweaking
fixes #773 unlink missing tmp files warnings
fixes #770 a
fixes #766 lang loading protection

Added $lang path traversal protection
Using i18n_merge to load core lang