Allow customer to access /spell/