deny from all
allow from localhost
