init: protect files in laravel