Forbidden to acces CI/application

You're not supposed to be able to directly call something from the /application or /system dirs via the url. Why do you need to? Everything goes through index.php which loads the appropriate controllers (indirectly - "application" is NEVER in the url).