FIX Added some sensible defaults for 403
FIX Added some sensible defaults for 403

Added some default settings for explicitly blocking composer/vendor requests.
Server environment setups do this already, but providing out-of-the-box
settings is a better practice

alexclifford/silverstripe-build,silverstripe-australia/silverstripe-build