FIX .htaccess for rest/

.htaccess2

+   Options -Indexes 
+   Options FollowSymLinks Includes ExecCGI
+   <FilesMatch ".*">
+    Order deny,allow
+    Deny from all
+   </FilesMatch>
+   # Root to allow index.php
+   <FilesMatch "^$">
+    Order allow,deny
+     Allow from all
+   </FilesMatch>
+   # Core root
+   <FilesMatch "^(index|ws_server|static|merged_js|merged_css|reopen|applet_launcher|applet_controller|log)\.php$">
+    Order allow,deny
+    Allow from all
+   </FilesMatch>
+   # App static files
+   <FilesMatch "\.(css|js|jpg|png|gif|ttf|woff|woff2)$">
+    Order allow,deny
+    Allow from all
+   </FilesMatch>
+   # App tools files
+   <FilesMatch "\.(htm|html|jar|jnlp)$">
+    Order allow,deny
+    Allow from all
+   </FilesMatch>

rest/.htaccess

-Order allow,deny
-Allow from all
+<FilesMatch ".*">
+	Order allow,deny
+	Allow from all
+</FilesMatch>
+
 RewriteEngine On
 RewriteCond %{REQUEST_FILENAME} !-f
 RewriteCond %{REQUEST_FILENAME} !-d