deny diret access to files in ui/views