don't allow access to static resources in the root directory