update default app dir; add generate .htaccess file to protect app path;

update default app dir; add generate .htaccess file to protect app path;