Security fixes of .htaccess

and link to github in .update.php