Options -Indexes
RewriteEngine On
RewriteCond %{HTTP:Authorization} .
RewriteRule ^ - [E=HTTP_AUTHORIZATION:%{HTTP:Authorization}]
RewriteRule ^api/index\.php$ - [L]
RewriteRule ^api(?:/.*)?$ api/index.php [L,QSA]
<IfModule mod_headers.c>
 Header always set Strict-Transport-Security "max-age=31536000; includeSubDomains"
</IfModule>
