fix(.htaccess): add CORS, https and redirect