added security for app and storage folder

RewriteRule ^(app|storage)(/.*|)$ - [NC,F]