allow from localhost
deny from All