Update .htaccess for routing and security