allow access to *.css and *.js files