Update .htaccess

[amulet1]

Could we drop the unrestricted access directives and instead rely on the web server global configuration?

At best it is not needed, and at worst it is a security concern as it overrides a potentially more restrictive web server configuration.

[TDannhauer]

Fine for me.

Any concerns @ralflang ?

[ralflang]

I'd rather keep it until dynamic configuration is ready. Let's finish the stable release todos first. Afterwards we should drop the file altogether and let the config tool write it (if needed).