allow access to .php in dev