no permit if docroot with '..'; change colors for version in login page