security fix: SA-CORE-2013-003, fix files/ protection

sites need to be reverified to take effect, so we just do that in the frontend