* Preserve X-Xsrf-Token header from .htaccess
Preserve X-Xsrf-Token header for session based authentication when building API in Laravel
* Update .htaccess
* Update .htaccess
---------
Co-authored-by: Taylor Otwell <taylor@laravel.com>
This rewrite condition is never hit as the rewrite to index is triggered before this, and the authorization is never passed on. Moving this condition corrects that issue as mentioned on the commit
If you open the `/css`, `/js`, or any other folder on the default server, you can see the list of files in the directory.
The `-Indexes` option forbids viewing directory files via the web interface.
Folders that exist have a redirect loop when visiting them. This is because Apache redirects to trailing slash for folders and the current rule is removing it, Apache then adds a trailing slash again.
