SERVER-9518 SERVER-10323 Fix access control in the web server