COS and other htaccess magic aswell as XSS protection on launch