access control feature on index.html