This is caused by the file 'recess/apps/.htaccess'. This file contains 'deny from all' and therefore prevents any direct access.

A simple solution is to create a file with the name .htaccess in your recess/apps/firstApp/public folder with the content 'allow from all'. Then it should work.

Florian