deny from all
allow from localhost

